1480 matches found
Privilege escalation
The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
CVE-2021-27767
CVE-2021-27767 stems from the BigFix Console installer built with InstallShield, which is linked to CVE-2021-41526 (InstallScript-based privilege escalation). The connected sources note that InstallShield-related flaws can enable local privilege escalation and, in some reports (CWE-427), may allo...
CVE-2021-27767 HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability
The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
CVE-2021-27766
CVE-2021-27766 and CVE-2021-27767 relate to the installers used by HCL BigFix: the BigFix Client and Console installers, both built with InstallShield. Connected sources corroborate that the underlying issue is the InstallShield/InstallScript vulnerability CVE-2021-41526, which can allow local pr...
CVE-2021-27766 HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability
The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
CVE-2021-27765
The CVE-2021-27765 entry relates to BigFix components packaged with InstallShield. Concrete details from connected documents show that BigFix Server API installer (and related BigFix Console/Client installers) use InstallShield and are affected by CVE-2021-41526, which involves InstallScript acti...
CVE-2021-27765 HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed...
CVE-2021-27764 HCL BigFix WebUI Cookie missing attributes
Cookie without HTTPONLY flag set. NUMBER cookies was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. WebUI...
CVE-2021-27762 HCL BigFix Platform is affected by misconfigured security-related HTTP headers
Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses...
CVE-2021-27761 HCL BigFix Platform is affected by weak web transport security
Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...
HCL BigFix Platform 安全漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from a cookie...
HCL Technologies BigFix Platform 安全漏洞
HCL Technologies BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies BigFix Platform that stems from...
HCL BigFix Platform 跨站请求伪造漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. HCL Technologies HCL BigFix Platform suffers from a security vulnerability that...
HCL Technologies HCL BigFix 安全漏洞
HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Client. An attacker exploits the vulnerability to perform elevation of privilege...
HCL BigFix Platform 安全漏洞
HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform. An attacker exploits the vulnerability to perform elevation of privilege...
HCL BigFix Platform Console 安全漏洞
HCL BigFix Platform is an endpoint security management platform. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform Console. An attacker exploited the vulnerability to perform elevation of...
HCL Technologies BigFix Platform 数据伪造问题漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. The HCL Technologies BigFix Platform suffers from a data forgery issue...
HCL BigFix Platform 加密问题漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies HCL BigFix Platform. An...
